if . 



A 6 associi 

Q. ' 



biated with\the received data packet in response to satisfying the filter criteria associated with 

7 the at least one Alter; and 

8 a controllerw;oupled to the network interface, to dynamically create and remove the filters 

9 controlling access toVhe different service levels based, at least in part, on an admissions profile. 



1 



2. (Amended) The apparatus of dlaim 1 , wherein the at least one filter when 

2 triggered, initiate an admission control decision preventing premature allocation of service level 

3 resources which are not yet required or authorized. 



1 3. (Amended) The apparatus k>f claim 2, wherein each of the filters is triggered by 

2 information contained within the received data packet. 

1 4. (Amended) The apparatus of claim 3, wherein each of the filters is triggered by 

2 one or both of packet source information and packet destination information. 

1 5. The apparatus of claim/ 1 , wherein the admissions profile is stored in a 

2 communicatively coupled remote devfice. 



1 6. The apparatus of claim 5, wherein the communicatively coupled remote device is 

2 a bandwidth broker or other generic policy server. 

1 7. The apparatus of clahjn 1, wherein the admissions profile is available locally 

2 within the apparatus. 



1 
2 
3 
4 

1 



8. (Amended) The 
ingress profile in response to detec 
modifies the received data packet 
level, in accordance with the 



appkratus of claim 1 , wherein the controller establishes an 
ng an associated trigger event, wherein the ingress profile 
adhering to the filter criteria to denote a particular service 
admissions profile. 



9. The apparatus of claim 8, wherein the controller removes ingress profiles when 



2 data packets adhering to the filter 



criteria are no longer received, liberating apparatus resources. 
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1 1 0. The apparatus of claim 8, wherein the controller removes ingress profiles after a 

2 predetermined period of time, liberating apparatus resources. 

1 11. (Amended) The apparatus of claim 1 , wherein the controller removes at least one 

2 of the filters in accordance with a network administration policy. 

1 12. (Amended) The apparatus of claim 11, wherein the controller removes at least 

2 one of the filters based, at least in part, on time-of-day. 

1 13. (Amended) A method for controlling provision of differentiated services in a data 

2 network, the method comprising: I 

3 (a) installing a filter on a network edge device to provide a trigger notification upon 

4 detecting data packets adhering to filter criteria; 

5 (b) determining whether a received data packet satisfies the filter criteria; and 

6 (c) issuing a command by a bandwidth broker to a controller of the network edge 

7 device to dynamically install or remove a/filter in response to determining whether the received 

8 data packet satisfies the filter criteria. 

1 14. (Amended) The method'bf claim 13, further comprising (d) marking the received 

2 data packets adhering to the filter criter/a according to a subscribed service level. 

1 15. (CANCEL) 

1 16. The method of claim 14, wherein the marking of the received data packet includes 

// 

2 setting a logic value of a bit in a Typeiof Service (ToS) field of a header of the data packet. 

/ 

1 1 7. The method of claim 14 further comprising: 

2 (e) identifying and marking the received data packets with routing information in 

3 accordance with the subscribed service level. 

1 18. The method of claifn 1 7 further comprising: 
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2 (f) placing the data packets \fi a proper format for transmission. 

1 1 9. The apparatus of claim A , wherein the classifier marks a Type of Service (ToS) 

2 field of the received data packet to demote a level of service for transmission of the data packet. 

1 20. The apparatus of clai/n 1 , wherein the controller further dynamically controls 

2 access to at least one classifier profile in accordance with the admission profile. 



Li ^"7 21 • (Amended) An apparatus adapted to facilitate communications between a client 
(^Jyj Ay de Y ice m d a remote device, composing: 

3 V filter means for controlling aVcess to different service levels; 
(J/* means for classifying and marlW one of the service levels associated with the received 

/^y^ data P acket in response to satisfying filte\criteria associated with the filter means, the means for 

6 classifying being communicatively coupledSto the filter means; and 

7 control means for dynamically creatin^and removing a portion of the filter means based 

8 at least in part on an admission profile. 



1 22. The apparatus of clairn/2 1 , wherein the admissions profile is stored 

2 communicatively coupled remote device. 



in a 



1 23. The apparatus of clafm 22, wherein the communicatively coupled remote device 

2 a bandwidth broker or other generic policy server. 



is 



1 

2 filters. 



24. The apparatus of claim 2 1 , wherein the filter means comprises a plurality of 



1 25. The apparatus off claim 24, wherein the control means removes at least one of the 

2 filters in accordance with a network administration policy. 



1 



26. The apparatus /of claim 25, wherein the control means removes at least one of the 



2 filters based, at least in part, 6n time-of-day. 
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